Privacy Policy

Last updated: December 4, 2025

Our Privacy Commitment

  • ✅ We never train AI models on your data
  • ✅ We never sell your personal information
  • ✅ We never share your data with third parties for marketing
  • ✅ Your profile data is yours - delete anytime

1. Information We Collect

Account Information

When you create a Shipped profile, we collect:

  • Email address - For authentication and important account updates
  • Profile handle - Your unique @username
  • Display name - The name shown on your profile
  • Bio and profile picture - Optional information you choose to share

Product & Project Data

You voluntarily provide information about your projects:

  • Product names, descriptions, and URLs
  • Revenue figures (MRR) you choose to display
  • Tech stack information
  • Social media links

Analytics Data

To help you understand your profile's reach, we collect:

  • Page views and click-through rates
  • Referrer sources (where visitors came from)
  • Device and browser information (for compatibility)
  • Geographic region (country-level only)

2. How We Use Your Information

We use your data exclusively for:

  • Providing the service - Displaying your profile and products
  • Analytics - Showing you how your profile performs
  • Security - Preventing abuse and protecting your account
  • Communication - Sending essential service updates (you can opt out of newsletters)

3. Data Storage & Security

Infrastructure

Your data is stored securely using:

  • Supabase (PostgreSQL) - Enterprise-grade database with encryption at rest
  • Row Level Security (RLS) - Database-level access controls ensure users can only access their own data
  • Netlify CDN - Secure content delivery with DDoS protection

Security Measures

  • All data transmitted over HTTPS/TLS encryption
  • Passwords hashed using industry-standard algorithms
  • Regular security audits and updates
  • OAuth authentication via Supabase Auth

4. AI & Data Training

We do NOT use your data to train AI models.

Your profile content, products, analytics data, and personal information are never used to train machine learning models, AI systems, or shared with third-party AI services. Your data is yours alone.

5. Data Sharing & Third Parties

We share data only in these limited circumstances:

  • Public profiles - Information you mark as public is visible to anyone visiting your page
  • Service providers - Supabase (database), Netlify (hosting), DiceBear (avatar generation) - only as needed to operate the service
  • Legal requirements - If required by law or to protect rights and safety

We never sell or rent your personal information to advertisers or marketers.

6. Cookies & Tracking

We use minimal cookies for:

  • Authentication - Keeping you logged in
  • Preferences - Remembering your theme (dark/light mode)
  • Analytics - Understanding how visitors use the platform (anonymized)

We do not use invasive tracking or third-party advertising cookies.

7. Your Rights & Control

You have complete control over your data:

  • Access - View all your data anytime from your dashboard
  • Edit - Update your profile, products, and settings anytime
  • Delete - Permanently delete your account and all associated data
  • Export - Download your data in JSON format (coming soon)
  • Opt-out - Unsubscribe from newsletters with one click

8. Data Retention

  • Active accounts - Data retained as long as your account is active
  • Deleted accounts - All personal data permanently deleted within 30 days
  • Analytics - Aggregated analytics retained for service improvement (anonymized)
  • Backups - Backup copies deleted within 90 days of account deletion

9. Children's Privacy

Shipped is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. International Users

Shipped is operated from the United States. If you are accessing from the European Union, United Kingdom, or other regions, please note that your data may be transferred and processed in the United States. We comply with applicable data protection laws including GDPR.

11. Changes to This Policy

We may update this Privacy Policy occasionally. We'll notify you of significant changes via email or a prominent notice on the platform. Continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

Questions about privacy or your data? Contact us:

  • X (Twitter): @azagsam
  • Email: privacy@shipped.so

Built by indie hackers, for indie hackers.

We're committed to privacy because we're builders ourselves. We built Shipped as a tool we'd want to use - one that respects your data and puts you in control.